Multiple Instance Learning for Malware Classification

Jan Stiborek, Tomáš Pevný, Martin Rehák

This work addresses classification of unknown binaries executed in sandbox by modeling their interaction with system resources (files, mutexes, registry keys and communication with…